6bea57fb-8dfb-4177-9ae8-42e8b3529933_RuntimeDeviceInstall[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

6bea57fb-8dfb-4177-9ae8-42e8b3529933_RuntimeDeviceInstall.dll
Size

12KB
MD5

8fc840b45813cc5c2a07e3630b62db34
SHA1

4396cae06e74d0c26c10cb76dc898dd5974546d1
SHA256

c407a7d3920dfac893f61a6205b910dbbf1aa2a013fdde8137e5614cfb14803c
SHA512

681b181a470ebf3cd9d30b68c714bd0e3d2344562478eba59cd4ce425af68a2fdab116cb4f0e0b5ba141c28f55db71f288fbe246fec4a221a30b7b62c4bc734a
SSDEEP

192:6T8hOhNVW1wWEXwVrDBQABJ7TxhjepVWnSX01k9z3AIZJ7S+2A:6T8hOhnW1wWE0DBRJnHjezWSR9zZTvp

Score

1^/10

Malware Config

Signatures

Files

6bea57fb-8dfb-4177-9ae8-42e8b3529933_RuntimeDeviceInstall.dll
.dll windows:10 windows x64 arch:x64

Code Sign

33:00:00:04:60:cf:42:a9:12:31:5f:6f:b3:00:00:00:00:04:60
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:20

Not After

14/11/2024, 19:20

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cb:5f:25:96:2a:ed:70:57:1b:85:29:01:f9:89:2d:39:e1:36:6b:39:2f:53:14:fa:5b:f6:bd:0d:e8:34:eb:55
Signer

Actual PE Digest

cb:5f:25:96:2a:ed:70:57:1b:85:29:01:f9:89:2d:39:e1:36:6b:39:2f:53:14:fa:5b:f6:bd:0d:e8:34:eb:55

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

6bea57fb-8dfb-4177-9ae8-42e8b3529933_RuntimeDeviceInstall.pdb

Sections

.rdata
Size: 512B - Virtual size: 460B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.apiset
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:04:60:cf:42:a9:12:31:5f:6f:b3:00:00:00:00:04:60Certificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

cb:5f:25:96:2a:ed:70:57:1b:85:29:01:f9:89:2d:39:e1:36:6b:39:2f:53:14:fa:5b:f6:bd:0d:e8:34:eb:55Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.rdata Size: 512B - Virtual size: 460B

.apiset Size: 512B - Virtual size: 164B

.rsrc Size: 1KB - Virtual size: 1KB

33:00:00:04:60:cf:42:a9:12:31:5f:6f:b3:00:00:00:00:04:60
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

cb:5f:25:96:2a:ed:70:57:1b:85:29:01:f9:89:2d:39:e1:36:6b:39:2f:53:14:fa:5b:f6:bd:0d:e8:34:eb:55
Signer

.rdata
Size: 512B - Virtual size: 460B

.apiset
Size: 512B - Virtual size: 164B

.rsrc
Size: 1KB - Virtual size: 1KB